CVE-2017-15289: Qemu

Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days.

The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.

Affected products

• Qemu Qemu: up to and including 2.10.2

Published 2017-10-16. Last modified 2026-06-17.